Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/OxWF_7xij9AeSF8xZqvcmF9n81I.roa
File: OxWF_7xij9AeSF8xZqvcmF9n81I.roa (raw, json)
Hash identifier: PaIHHoZTPo77kkUl2dQR5CkIDxb2xVhOtV5vSJ07WgE=
Subject key identifier: 3B:15:85:FF:BC:62:8F:D0:1E:48:5F:31:66:AB:DC:98:5F:67:F3:52
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0183C702DAD77A818A531DA2D705E6635B76
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/OxWF_7xij9AeSF8xZqvcmF9n81I.roa
Signing time: Tue 11 Oct 2022 12:26:36 +0000
ROA not before: Tue 11 Oct 2022 12:26:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 166.108.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:02:da:d7:7a:81:8a:53:1d:a2:d7:05:e6:63:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Oct 11 12:26:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b1585ffbc628fd01e485f3166abdc985f67f352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:d6:a5:6b:3a:6e:3d:f9:1e:29:bd:f0:86:
30:a3:85:59:47:f5:c1:3c:6f:95:de:91:ff:8d:65:
ef:64:68:10:9d:25:84:8f:3b:6f:6a:0e:0e:c5:a0:
05:99:00:6b:da:cb:6f:8b:f2:81:53:6d:30:d0:78:
59:fe:35:b0:f8:ac:80:58:a5:f1:9c:35:82:ca:77:
57:3e:b9:21:48:c3:12:99:d8:ac:82:33:dd:68:5c:
2a:b8:15:a6:12:22:31:1a:de:03:45:58:cf:1f:cb:
4f:bf:1b:26:87:c9:19:3f:fa:30:d3:d0:42:aa:87:
08:f8:d6:c4:e7:05:f2:5a:8a:71:20:d7:d5:6f:a2:
03:c4:b3:9c:0e:36:b4:cf:26:84:5d:98:85:93:06:
ba:33:98:be:6d:29:28:c0:01:92:fc:fd:89:2a:a4:
b9:de:2a:13:eb:6a:33:ad:e2:c0:fd:66:43:fd:d3:
99:4a:80:99:f4:3b:51:d8:c4:86:92:4a:4f:cd:e7:
72:df:e6:85:1d:77:d1:21:0a:26:35:92:81:5a:bd:
11:50:1c:d2:77:24:68:f4:39:b2:ea:a2:f0:a9:ba:
46:f5:9a:ff:7b:e0:b2:7b:2f:9c:91:c6:fb:49:b6:
a8:01:a6:a9:84:45:5a:e4:75:a5:2e:a8:38:9a:10:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:85:FF:BC:62:8F:D0:1E:48:5F:31:66:AB:DC:98:5F:67:F3:52
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/OxWF_7xij9AeSF8xZqvcmF9n81I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:be:c3:e2:34:34:27:6d:4d:c6:ff:4c:68:e3:0c:f4:c9:21:
75:be:e8:92:1e:22:44:95:14:13:1d:2c:64:7c:58:c1:70:c1:
ae:a9:40:32:1f:b2:ff:22:9a:17:dc:cc:00:ae:09:8d:7d:a4:
93:d9:e4:61:17:df:1f:a5:e0:65:6a:b0:bc:7d:e3:53:5f:9d:
ac:a3:13:31:7e:83:5f:fd:0f:2c:da:1d:a6:53:b0:3d:7d:07:
cc:39:d3:70:cc:af:b5:c8:7b:d3:04:fd:23:03:ad:e0:ae:70:
19:78:6b:d0:d4:d0:9b:c8:5b:52:79:eb:e6:56:c6:35:0a:4f:
1a:57:8f:75:e9:ea:25:0e:1e:26:8d:4c:f3:14:19:45:95:dd:
56:94:2b:c6:5f:19:60:b1:dc:6b:69:6b:d7:c8:1c:3e:32:54:
c0:83:97:29:b9:1c:6d:68:ef:9f:83:6d:38:6c:95:a0:93:03:
83:90:59:08:ee:a8:11:f6:25:5f:b6:b1:de:f3:25:ef:89:12:
ec:d8:ce:b5:12:b4:18:8b:31:c9:78:52:74:35:ff:8c:bf:70:
58:93:3c:87:52:22:a4:21:08:fc:0c:7b:e4:eb:41:90:bd:7e:
53:e4:2f:d1:07:64:bf:3a:4f:88:00:d6:ad:02:80:1f:53:e7:
f7:31:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-fra.rpki-client.org